Privacy

Updated 2026-11-14Draft · awaiting review

This site sets no cookies, stores nothing in your browser and loads no scripts, fonts or images from other sites. It has no accounts, no comments and no advertising. This notice says what is processed when you visit, when you write to us and when you are named in the catalog.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Ilja Schlak

E-mail: hello@readbeforerun.ai

Hosting and server logs

The site consists of static files. It is hosted on Cloudflare Workers by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When your browser, feed reader or agent requests a page or a file, it sends its IP address, the address requested, the date and time, the user agent and, if your browser passes it on, the referring page. Cloudflare processes these data on our behalf to deliver the site and to protect it against attacks and misuse. This applies to every request: a page, a feed, catalog.json fetched by an agent or by the search skill, or a badge of this site shown on another page.

We keep no log files of our own.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is to deliver the site reliably and securely.

Cloudflare is our processor under its Data Processing Addendum (Article 28 GDPR). It answers a request from the data centre its network routes you to, which can be outside the European Union. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; where a transfer is not covered by it, the addendum applies the EU standard contractual clauses. Cloudflare describes its own processing in its privacy policy.

Analytics

We want to know how much the site is read. For that we look at the traffic figures Cloudflare derives from the requests described above: the number of requests and visitors over time and by country. In its security analytics Cloudflare also shows us attributes of sampled requests, such as path, IP address, user agent and country. Cloudflare makes these analytics data available to us for the last 31 days. We do not combine them with other data and do not try to identify visitors.

We run no analytics script. Cloudflare’s in-browser measurement (Web Analytics) is not used, and the Content Security Policy of this site allows scripts from this site only, so a measurement script from another host cannot run. Nothing is stored on your device or read from it, so there is no consent banner.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is to see how much the site is read.

Search, downloads and recordings

The search runs in your browser on an index downloaded from this site. What you type is not sent to us or to anyone else. Terminal recordings and downloads such as the search skill come from this site as well.

Entries link to source repositories and documentation on other sites, mainly on github.com. Those sites receive data from you only when you follow a link; their own privacy notices apply.

Writing to us

You can reach us at hello@readbeforerun.ai, and at security@readbeforerun.ai for security reports. When you write, we process your e-mail address, your name if you give it and the content of your message in order to answer and to handle the matter: a correction, a proposal, a dispute of a value or a security report. Mail to these addresses is forwarded to the maintainer’s mailbox by Cloudflare’s Email Routing, under the addendum named above.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is to answer enquiries and to keep the catalog correct.

Newsletter

There is no newsletter yet. The subscription form on this site is switched off and sends nothing. Before a newsletter starts, this section will name the provider, the confirmation procedure and how to unsubscribe.

People named in the catalog

The catalog describes tools that were released to the public. An entry names the tool’s public source repository, whose address can contain a person’s account name, and it quotes what the author wrote in the README, the manifest or the code, each with file, line and commit. We take these data from the public repository, not from the person (Article 14 GDPR). We publish them to describe the tool and to make every statement checkable. An entry stays online as long as the tool is listed; changed and removed entries are logged under Changes.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest, and that of our readers, is a verifiable description of security tools that are offered to the public.

If you maintain a listed tool, you can dispute a value or object to the listing at hello@readbeforerun.ai. A dispute is checked against the pinned commit; a changed value is logged under Changes.

Your rights

Under the GDPR you have the right to access your data (Article 15), to have them corrected (Article 16) or erased (Article 17), to have their processing restricted (Article 18) and to receive them in a portable format (Article 20), each under the conditions the law sets.

Right to object. Where we process data on the basis of Article 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Article 21 GDPR).

To use these rights, write to hello@readbeforerun.ai. You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), for example the one at your place of residence.

You do not have to provide any data to read this site. We make no automated decisions about visitors and do no profiling.